$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer File: 98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer (raw, json) Hash identifier: nw2wIo/0bLu/Kw7UFUdVgxnhSLrTII56xdOtnNP2/T0= Subject key identifier: 61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849710C9B23A7258E8C7578A400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Apr 2025 00:45:34 +0000 Certificate not after: Sun 11 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 10631 IP: 131.96.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:0c:9b:23:a7:25:8e:8c:75:78:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 7 00:45:34 2025 GMT Not After : Jul 11 00:45:34 2027 GMT Subject: CN=98b0e4c3-1653-497d-83ba-9d8b10e9f1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a6:31:f4:26:f6:c5:9c:48:b7:47:a7:50:ef: 59:46:07:3b:0c:4f:e0:73:bb:71:a9:0e:ba:af:d0: fe:e4:5c:dd:1c:63:d7:eb:5c:92:6a:19:d3:8b:c9: 33:45:d5:33:06:ec:bd:61:ca:62:6d:8c:cb:ce:ca: 20:df:90:26:a8:64:5b:33:f2:cb:1a:3d:37:5c:e4: b7:bb:09:c4:4e:a6:5d:b8:85:fc:69:24:08:b6:8f: 5b:12:7e:f0:8a:59:83:89:68:59:88:8a:be:92:d9: 7e:16:09:ee:15:b8:ec:e3:46:d9:62:10:20:d2:f6: f3:d7:92:a3:44:4c:0e:1e:fb:8e:11:8e:4f:b9:cf: 5b:98:c8:66:a5:d8:62:a0:fa:12:05:e6:ec:20:97: e7:1a:6f:14:3b:54:aa:28:2f:0a:3b:a5:41:10:e1: 0b:f6:d0:38:cf:d1:fb:ab:c3:88:53:91:ba:c7:c7: 63:42:20:eb:d5:59:c9:2b:a2:0e:18:b9:5d:c6:31: 25:12:39:87:a7:fb:5b:a9:64:b5:25:92:9e:cb:1e: 59:02:a0:ce:20:21:73:65:b6:90:84:33:39:c0:2f: a0:91:67:a0:dc:2a:c8:7e:a2:cb:6a:4c:d8:60:83: 65:be:cb:81:47:cb:b4:69:a9:5f:0e:d8:8e:f5:16: 48:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 131.96.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10631 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:26:b1:65:2a:d9:11:09:f2:7f:6f:99:6c:67:97:db:64:1d: 51:bc:21:b7:ef:dc:31:61:fd:3e:11:f2:f7:0e:83:44:92:37: 11:d7:51:eb:05:4f:c4:97:a2:bc:59:bc:30:18:26:c1:94:f3: c6:06:b9:7e:c8:ea:52:0d:90:9f:fb:0a:92:de:a5:94:7d:cd: 24:de:ab:2f:9c:14:f2:b4:fd:46:4d:6c:1c:00:3d:2e:9d:8a: 3c:e5:61:bc:5c:5d:9e:6e:33:b6:5f:88:f8:78:66:a4:ed:bb: 14:6f:ef:bc:1c:00:10:10:20:35:a4:80:d7:7e:b2:0f:9d:1c: bc:b2:4a:d4:c3:0b:12:8a:0d:89:5a:e2:5e:61:24:85:e9:e7: a8:c2:67:03:92:75:e2:aa:e1:bc:c7:14:ad:e1:77:49:a5:ae: 66:63:8b:cd:a2:08:2f:67:da:9a:86:a1:6b:80:50:8a:c9:54: d0:17:b5:12:f6:dc:31:3a:74:7b:d5:32:69:d2:30:64:2a:4b: 09:ef:29:eb:8a:3a:da:ea:7b:eb:b8:94:43:9f:1d:08:34:97: 1c:ab:b4:cb:c2:cd:f0:4c:b1:33:23:bd:12:12:5b:d6:f3:c1: 85:70:ac:7e:79:4c:6c:ff:d8:17:44:4b:58:ef:f9:53:70:5d: 8a:e2:94:51 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWElxDJsjpyWOjHV4pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwNzAwNDUzNFoXDTI3MDcxMTAwNDUzNFowLzEtMCsGA1UEAxMk OThiMGU0YzMtMTY1My00OTdkLTgzYmEtOWQ4YjEwZTlmMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaYx9Cb2xZxIt0enUO9ZRgc7DE/gc7txqQ66 r9D+5FzdHGPX61ySahnTi8kzRdUzBuy9YcpibYzLzsog35AmqGRbM/LLGj03XOS3 uwnETqZduIX8aSQIto9bEn7wilmDiWhZiIq+ktl+FgnuFbjs40bZYhAg0vbz15Kj REwOHvuOEY5Puc9bmMhmpdhioPoSBebsIJfnGm8UO1SqKC8KO6VBEOEL9tA4z9H7 q8OIU5G6x8djQiDr1VnJK6IOGLldxjElEjmHp/tbqWS1JZKeyx5ZAqDOICFzZbaQ hDM5wC+gkWeg3CrIfqLLakzYYINlvsuBR8u0aalfDtiO9RZI3QIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFGFPvNkxJEKgV2IvxQoXsdw4ksmXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 OGIwZTRjMy0xNjUzLTQ5N2QtODNiYS05ZDhiMTBlOWYxYTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzk4YjBlNGMzLTE2NTMtNDk3ZC04 M2JhLTlkOGIxMGU5ZjFhNC85OGIwZTRjMy0xNjUzLTQ5N2QtODNiYS05ZDhiMTBl OWYxYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCDYDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIp hzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBQJrFlKtkRCfJ/b5lsZ5fbZB1RvCG379wxYf0+EfL3DoNEkjcR 11HrBU/El6K8WbwwGCbBlPPGBrl+yOpSDZCf+wqS3qWUfc0k3qsvnBTytP1GTWwc AD0unYo85WG8XF2ebjO2X4j4eGak7bsUb++8HAAQECA1pIDXfrIPnRy8skrUwwsS ig2JWuJeYSSF6eeowmcDknXiquG8xxSt4XdJpa5mY4vNoggvZ9qahqFrgFCKyVTQ F7US9twxOnR71TJp0jBkKksJ7ynrijra6nvruJRDnx0INJccq7TLws3wTLEzI70S ElvW88GFcKx+eUxs/9gXREtY7/lTcF2K4pRR -----END CERTIFICATE-----Generated at Mon Apr 28 09:28:49 2025 by rpki-client